Design cloud architectures that are sovereign, secure, and built to last.
WAF++ is the open, vendor-neutral framework for teams who refuse to let cloud complexity dictate their architecture. 8 pillars. 83+ controls. Zero lock-in.
8 pillars. One coherent system.
Every pillar is a lens for making better cloud decisions — from cost to sovereignty to AI-assisted operations.
Retain full control of data, workloads, and infrastructure. Avoid vendor lock-in and meet digital sovereignty requirements.
AI-assisted architecture reviews and policy-aware autonomous agents that operate cloud workloads safely.
Protect workloads against threats, misconfiguration, and unauthorized access.
Build systems that recover gracefully and serve users consistently at scale.
Two extra pillars for a world that classic frameworks weren't built for.
WAF++ takes the six proven Well-Architected pillars and adds the two that matter most for modern, regulated, AI-assisted cloud operations.
Sovereign
Digital sovereignty, data residency, and vendor independence. The first plus keeps your architecture under your control.
Explore Sovereign →Agentic
Policy-aware autonomous agents and AI-assisted architecture reviews. The second plus makes the framework ready for the agentic era.
Explore Agentic →Compliance checks that run before the cloud.
Static analysis on Terraform, AWS CDK, and more. No credentials. No API calls. Just fast, traceable results.
git clone https://github.com/WAF2p/pass.git
For the full Docker Compose stack (CLI + Server + Dashboard) see the complete installation guide.
From code to compliance in three steps.
Build infrastructure-as-code the way you already do. WAF++ stays out of your workflow.
Static analysis checks every resource against WAF++ controls — no cloud credentials needed.
Export PDF reports, block violations in CI, and prove governance to auditors.
Built by the community
Trusted by cloud practitioners.
WAF++ provides a stable foundation for digital applications and shows how technical precision and design sensitivity can be successfully combined.
WAF++ has great potential to become the perfect answer to real-world everyday questions from the technology, cloud & developer community.
Finally a framework that is not a sales pitch in disguise. WAF++ is built by engineers, for engineers.
The sovereign pillar alone makes WAF++ worth adopting for any European organization.
Ready to build cloud architecture with intention?
Join the community, read the docs, or run your first WAFPass scan today.